Questions tagged [microsoft-forefront-2010]
Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.
62
questions
1
vote
0
answers
148
views
Forefront 2010 (TMG): infinite redirection loop
The behaviour of the internal web server is to detect an incoming request over HTTP and respond with a 301 response to a HTTPS location (for all or only specific URLs), then TMG interferes and the ...
- 375
0
votes
2
answers
209
views
Sites must use TMG as default Gateway
Last week our Hyper-V server crashed and forced us to rebuild most of our network. While the network has been rebuilt we are having a major problem. We use Forefront TMG to route our web traffic using ...
0
votes
1
answer
30
views
Forefront 2010 does not let logins using 'Public or Shared Computer'
I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page.
...
- 29
0
votes
0
answers
474
views
How to create user in AD using FIM 2010 Sync Service Only?
I am new to FIM 2010 R2(MIM 2016). I want to create user in AD from my DB. I have DB that contains student information and based on that I want to create user in AD.
I want to perform this action ...
- 101
0
votes
1
answer
395
views
Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting
My environment requires me to be able to create Exchange mailboxes on
existing users, disable those mailboxes and then, some time later,
re-enable them and have Exchange reconnect them automatically ...
- 66
0
votes
1
answer
364
views
FIM2010 R2 SP1 service account requirements on database after installation
We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
- 101
1
vote
0
answers
92
views
Can end user using Forefront Identity Manager to leave security group?
In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
- 217
1
vote
0
answers
67
views
Manage UAG Server via WinRM
Does anyone know of there is a way to configure a UAG server to work with WinRM? We have a small number of servers and the "Server Manager" application as well as PowerShell are the way we generally ...
- 477
0
votes
1
answer
43
views
UAG 2010 and Exchange 2010 Service Pack installs
We are currently on Exchange 2010 SP2 and UAG 2010 SP1. I want to upgrade Exchange to SP3, and later on UAG to SP4, but not all at the same time due to scheduling. Ideally we'd like to do Exchange ...
- 235
2
votes
0
answers
355
views
Forefront UAG with SSL/X509 auth for REST API
I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
0
votes
1
answer
56
views
Single sign-on between two UAG servers
The situation:
site1.company.com is published in UAG 1 (Datacenter 1)
site2.company.com is published in UAG 2 (Datacenter 2)
My question:
Is it at all possible to set up a single sign on between ...
- 101
0
votes
1
answer
1k
views
Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection
Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection,
specialty I am enable to block other https websites but gmail is not blocking
till i enable https inspection & if i ...
- 1
1
vote
0
answers
36
views
Can Forefront TMG server as an outbound chacheing solution to a web farm
We are to deploy several web servers in a datacenters. All running Windows 2K12 + IIS.
I am not very familiar with data center best practices for deploying and maintaining web servers.
In the office ...
- 653
1
vote
1
answer
230
views
To expose MS CRM to the internet: Should we use IFD or something like Forefront UAG?
In our company we plan to expose our MS CRM 2011 system to the internet to make it easier to access from the outside.
As far as I can see there are basically 2 alternatives:
Make an Internet Facing ...
- 131
3
votes
1
answer
4k
views
Why does the clipboard not work with RDP through Microsoft's Unified Access Gateway (UAG)?
This one is really driving me nuts...
For one of our customers, we are allowed access using the Microsoft Unified Access Gateway, which provides an HTTPS-tunneled way to (among other things) run ...
- 171
1
vote
1
answer
662
views
FIM CM Broken After Manual Cert Renewal
I recently attempted to renew the certificate for the clmAgent user account according to these directions:
http://technet.microsoft.com/en-us/library/hh149034%28v=ws.10%29.aspx
I logged in with the ...
- 54.9k
1
vote
0
answers
143
views
SCCM 2007 + FEP 2010 deployment - when can I upgrade sql server?
I am in the process of migrating our forefront client security installation on the domain over to a forefront endpoint protection based on system center configuration manager 2007 platform.
I have ...
- 295
1
vote
1
answer
759
views
Is there a way to get more detailed logging out of Forefront TMG 2010
I am troubleshooting VPN connectivity issues with Forefront TMG. Everything looks correct in configuration but the packets are blocked regardless.
The logs are not very descriptive. I see:
Denied ...
- 189
1
vote
1
answer
269
views
SCCM migration to SCCM 2012
I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
- 97
4
votes
5
answers
15k
views
How do I find the WSUS server that my computers are connecting to for Windows Updates?
I have multiple WSUS servers setup on our domain; one is handling Windows Updates, while another is setup to only do Endpoint Protection updates (via SCCM 2012). Endpoint Updates are working properly ...
- 73
0
votes
1
answer
269
views
UAG Direct Access 2 node Array wipes the IIS web site for NLS that is configured on the same box when DA is Activated
any help would be awesome, I have created a two node UAG Direct Access array, although not best practice I have setup NLS website on the UAG DA servers. Every time I click Activate on the Forefront ...
- 11
1
vote
1
answer
99
views
Forefront Identity Manager 2010 no users
I've been scratching my head for a day or so trying to learn FIM.
I attempted to walk through this tutorial which is one of the things I want to use it for - but I couldn't get it to work (users don'...
- 745
3
votes
3
answers
2k
views
Forefront UAG vs. Server 2012 Direct Access
So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification.
The current ...
- 874
1
vote
0
answers
151
views
Installing VirtualBox disables Forefront
I have a Lenovo ThinkPad T520, less than a year old, running Windows 7 Ultimate.
After I install VirtualBox (it has happened with several versions), Forefront Endpoint Protection 2010 no longer ...
- 1,212
1
vote
1
answer
2k
views
Syntax for file and process exclusions in Forefront Endpoint Protection?
I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012.
For file types, which of these will work? Are they ...
- 68.3k
3
votes
1
answer
5k
views
Does Microsoft TMG 2010 handle websockets, at least through SSL?
I thought in my own insanity that if I published an IIS 8 web server with websockets through HTTPS there shouldn't be a problem even with the TMG.
However, regardless of publishing, filtering and ...
- 10.7k
0
votes
2
answers
5k
views
Forefront TMG 2010 RDP Connections without non-standard ports
From my reading, it looks like the Forefront TMG will not allow the passing of RDP connections through the firewall without configuring a non-standard port for each IP address of the internal servers ...
- 135
1
vote
1
answer
206
views
How to stop UAG authenticating requests via LDAP
I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
- 171
-2
votes
3
answers
924
views
TMG: Allowed user groups and weird group names
I am trying to setup a basic PPTP VPN connection using Forefront TMG 2010.
Whenever I try to connect to the VPN connection from my Windows 7 machine, I get an error related to unauthorized access.
So ...
- 119
1
vote
1
answer
176
views
Will Forefront 2010 Antispam/Antivirus protection work on all-in-one Exchange 2010 servers in DAG
We have 2 Exchange 2010 servers with every single role on each. Servers are in DAG mode and they have TMG 2010 as entry point and doing as load balancer. Can I install Forefront 2010 on both Exchange ...
- 3,703
0
votes
1
answer
2k
views
Disable Forefront Endpoint Protection 2010 Desktop Alerts
Is it possible to disable desktop alerts for FEP 2010, without disabling realtime protection?
I.e., the notification that pops up that says:
We want to maintain realtime protection, neutralise ...
- 1,883
0
votes
1
answer
273
views
Book for Forefront Identity Manager 2010 [closed]
I can't believe it but I am not able to find a book for Forefront Identity Manager 2010.
I am looking for a Administrator's Guide or something like that.
Any suggestions?
- 248
1
vote
1
answer
2k
views
Exchange 2010 and FPE Content Filtering
I have a box running Server 2008 R2, Exchange 2010 SP1, and Forefront Protection for Exchange 2010.
The issue is that I cannot for the life of me get my content filters to quarantine a single message ...
0
votes
1
answer
2k
views
Sporadic HTTP 408 response on pages behind MS Forefront TMG 2010
I'm getting sporadic HTTP 408 responses when I try to load pages from my site.
The network is set up with Forefront acting as a proxy in front of the web server. When I first load the page, it comes ...
- 230
3
votes
1
answer
595
views
Issues with Forefront for Exchange file filter
I have an issue where I want to strip some image attachments from emails.
Using Forefront for Exchange I can create a file filter rule based on attachment name, type, and size. This initially seemed ...
- 113
1
vote
0
answers
824
views
How do I add a new full admin account to SCCM 2007?
I want to install Forefront Endpoint Protection on my SCCM server using a new service account that I just created specifically for this purpose. I'll be using a separate reporting database so I'll ...
- 311
0
votes
2
answers
476
views
Forefront TMG - segregate authenticated traffic
I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not.
I would like to segregate my outbound network traffic according to traffic ...
- 15.4k
1
vote
5
answers
570
views
Cisco 2811 to Forefront - stop broadcast traffic
I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
- 15.4k
0
votes
2
answers
376
views
Forefront TMG page denied display
Forefront TMG - URL categorization reason not displays although it should be for denied pages.
I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
- 15.4k
1
vote
2
answers
734
views
Remove one's domain from general spam blacklist
We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help.
The problem I'm facing is that our domain is probably marked ...
- 235
4
votes
1
answer
4k
views
Forefront Protection for Exchange - Allowed sender still delivered to Junk Mail
I've got a fresh install of Server 2008 R2 SP1, Exchange 2010 SP1, and Forefront 2010 Protection for Exchange. All on the same box, Exchange is CAS/Hub/MBS. This is a testing box, looking to evaluate ...
- 77.2k
0
votes
1
answer
718
views
ForeFront TMG 2010 - Topology Question
Total 4 NICs
NIC1 - LAN interface
NIC2 - WAN 1 (ISP - A)
NIC3 - WAN 2 (ISP - B)
NIC4 - DMZ (ISP - C with Public IP Pool)
Hi All,
3 ISP Connections
2 For Internet use (Local LAN Internet Access – ...
- 2,347
1
vote
1
answer
3k
views
UAG Direct Access - Exporting GPO to offline hosts
I'm probably missing something here, but I couldn't find any reference to this.
I have a host that is using Direct Access from a remote location. We had to make changes on the server side and ofc, ...
- 33
2
votes
1
answer
3k
views
General Forefront TMG 2010 network / proxy configuration
We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes)
Our Network Topology is :
...
- 2,347
1
vote
2
answers
2k
views
SCCM 2007 not installing Forefront Endpoint Protection client
We've recently upgraded from Forefront Endpoint Protection 2007 to 2010 and it now needs SCCM to deploy the clients, so we are using SCCM for the first time and struggling a little bit.
SCCM is fully ...
- 908
2
votes
2
answers
228
views
How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway
As in the title.
We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server.
I know that TMG is an update to the old ISA server and I ...
- 2,727
1
vote
0
answers
404
views
Scan a NAS Device with Microsoft Forefront Endpoint Protection
We are having problems with viruses sneaking through our virus scanner and onto our NAS and I want to scan the whole NAS. If I attempt to run a scan on the whole drive using the GUI for Forefront ...
- 1,670
2
votes
3
answers
1k
views
Does MS Forefront TMG cache authentication?
I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the ...
- 653
2
votes
1
answer
7k
views
Unable to join the domain?
I am having difficulties in joining my Windows Server to the domain, may I know what could be the problem ?
I suspect that there is a firewall in between this DR internal site and the DMZ where this ...
- 1,081
1
vote
1
answer
1k
views
Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?
I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
- 1,081